MalwarePublished 20 Nov 2025

New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages

Source SecurityWeek

Description

The Android malware is in development and appears to be mainly aimed at users in Europe. The post New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages appeared first on SecurityWeek .

Impact

For European organizations, especially financial institutions and enterprises relying on secure messaging for communications, Sturnus poses a risk of unauthorized access to sensitive financial data and transaction manipulation. The interception or alteration of messages on WhatsApp, Telegram, and Signal could lead to fraudulent transactions, financial losses, and reputational damage. Individuals using Android devices for banking and messaging are also at risk of credential theft and financial fraud. The malware could undermine trust in encrypted messaging platforms, potentially disrupting secure communications. Given the malware is still in development and not widely exploited, the immediate impact is limited, but the potential for significant financial and data loss exists if the malware becomes operational and widespread. Organizations may face increased costs related to incident response, fraud remediation, and regulatory compliance if breaches occur. The threat also highlights the challenge of securing mobile endpoints and encrypted communications against sophisticated malware targeting multiple messaging platforms simultaneously.

Defensive guidance

European organizations should implement advanced mobile threat detection solutions that monitor for suspicious behaviors on Android devices, particularly those related to messaging apps. Enforce strict app installation policies, restricting users to trusted sources such as the Google Play Store and employing app vetting tools to detect malicious applications. Educate users about the risks of installing unofficial or unknown apps and the importance of verifying app permissions, especially those requesting access to messaging services. Employ multi-factor authentication (MFA) for financial transactions and messaging platforms to reduce the risk of unauthorized access even if credentials are compromised. Regularly update Android OS and messaging apps to benefit from security patches and improvements. Network-level protections such as anomaly detection for unusual messaging traffic patterns can help identify potential malware activity. Collaborate with mobile security vendors to stay informed about emerging threats like Sturnus and apply threat intelligence feeds to enhance detection capabilities. Finally, develop incident response plans specifically addressing mobile malware infections and secure communication breaches.

References

securityweek.com/new-sturnus-banking-trojan-targets-whatsapp-telegram-signal-messages/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 20 Nov 2025, 15:42 UTC

References

Community reviews

Related threats